Privacy Policy

Effective Date: 1st January 2025

This Privacy Policy describes how A.L. Experiences and Solutions Private Limited ("Company", "we", "us", or "our") collects, uses, and protects the personal information of users ("you" or "your") of the Afterlife mobile application ("App").

We are committed to ensuring that your privacy is protected and that your data is handled securely, transparently, and in compliance with applicable laws, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India).

1. Information We Collect

We collect the following types of information:

a. Personal Information

Full name, contact number, email address
Aadhaar number (for KYC)
Residential address
Date of birth, gender

b. KYC and Verification Data

Aadhaar details via DigiLocker
PAN or other government-issued documents (if required)

c. Uploaded Data

Financial, legal, and personal documents
Digital will and succession preferences
Assigned contacts: Buddies and Secretkeepers

d. Usage Data

Device and OS information
IP address
App activity and token consumption history

2. How We Use Your Information

Your information is used to:

Verify your identity via Aadhaar-based KYC
Create and manage your secure account
Provide core features such as vaults, assignments, and legacy delivery
Communicate important updates or alerts
Monitor and enhance app performance and security
Comply with legal or regulatory obligations

2A. Lawful Basis for Processing

We collect and process your personal data based on one or more of the following lawful bases:

Consent: When you voluntarily provide information or agree to our terms during sign-up and onboarding.
Contractual necessity: To fulfill the services offered by the Afterlife platform, such as secure data storage, assignment, and post-demise delivery.
Legal obligations: To comply with applicable laws, such as identity verification requirements and KYC obligations.
Legitimate interest: To improve our services, secure user data, and prevent fraud or abuse of the platform.

3. Data Sharing and Disclosure

We do not sell or rent your personal data to any third party. We may share your data with:

DigiLocker (for Aadhaar-based KYC)
Payment gateways (e.g., Razorpay, PayU)
Government authorities, when legally required
Trusted service providers under strict confidentiality agreements

4. Data Security Measures

We follow industry-leading practices to protect your data:

a. Aadhaar-Based KYC with DigiLocker Integration

We verify your and your trusted contact's identities using Aadhaar-based KYC via direct integration with DigiLocker. As a verified DigiLocker partner, we ensure a secure and reliable identity verification process.

b. End-to-End Encryption (E2EE)

All files and messages are encrypted on the sender’s device before transmission and remain encrypted until the recipient accesses them. Only authorized users can view the data, both during storage and transmission.

c. Geo-Redundant Storage (GRS)

Encrypted data is replicated across geographically distant locations, enhancing durability and disaster recovery. Multiple copies are maintained in a secondary region to ensure availability even during regional outages.

d. Scheduled Access Control

Messages and files can be scheduled for future access. Notifications are securely sent to recipients, and access is time-restricted. Users must authenticate using a passkey and app PIN to retrieve data.

e. Passkey + PIN for Strong Authorisation

Users authenticate using a passkey and a six-digit PIN, offering password-less, phishing-resistant login. This two-factor method enhances account security.

f. Data Integrity Verification

Digital signatures are applied to files and messages, ensuring they remain unaltered and authentic during storage and transmission.

g. Comprehensive Logging and Monitoring

All access events are logged in an encrypted, tamper-proof audit trail. Activities are monitored in real time, and suspicious behavior is flagged for review.

h. ISO-Certified Security Standards

As an ISO-certified organization, we adhere to globally recognized information security standards to maintain the highest level of protection.

5. Data Retention and Deletion

Your data is retained for as long as your account is active.
Upon account deletion, all personal data, documents, vaults, logs, and tokens are permanently erased, unless required to be retained by law.
You may request deletion via the app or by writing to support@myafterlife.in.

6. Your Rights

You have the right to:

Access and update your personal information
Request a copy of your stored data
Withdraw consent and delete your account
Opt-out of non-essential communications

7. International Data Transfers

While all data is currently stored within India through Microsoft Azure, our infrastructure includes Geo-Redundant Storage (GRS), which may involve storing encrypted data backups in geographically distinct locations, including outside India.
These backups are used solely for disaster recovery and continuity purposes. If and when such cross-border transfers occur, they are done in compliance with applicable Indian laws and global data protection standards, including encryption, access control, and contractual safeguards.

8. Cookies and Tracking

The mobile app does not use cookies.
We may use anonymized analytics to improve user experience and app stability.

9. Children’s Privacy

The platform is not intended for individuals under 18. We do not knowingly collect data from minors.

10. Grievance Redressal Officer

In compliance with applicable Indian laws, including the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023, we have appointed the following Grievance Officer:

Name: Sheetal Koul
Designation: Grievance Redressal Officer
Email: grievance@myafterlife.in
Phone: +91 7045974877
Address: 801, Atlanta Centre, Sonawala Road, Goregaon East, Mumbai, Maharashtra - 400063

Users may submit concerns, grievances, or requests regarding data handling, privacy, refunds, or general terms. We will acknowledge all complaints within 48 hours and aim to resolve them within 15 working days from the date of receipt.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email or app notifications.

12. Contact Us

If you have any questions, requests, or concerns: Email: support@myafterlife.in
Phone: +91 7045974877 / +91 8879073748
Address: 801, Atlanta Centre, Sonawala Road, Goregaon East, Mumbai, Maharashtra - 400063

By using Afterlife, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.